Information Security Specialist - Remote

Overview

The Information Security Specialist is a strategic role within DeepHealth’s Quality, Regulatory, and Compliance department, responsible for assisting in the development, implementation, and maintenance of comprehensive information security compliance strategies. This position is critical in protecting organizational data, ensuring regulatory adherence, and mitigating potential security risks in the complex digital health landscape.

In Short

• Develop and implement holistic security compliance programs.
• Create comprehensive risk management frameworks.
• Design and maintain security policies, procedures, and guidelines.
• Continuously assess and update security strategies.
• Ensure alignment with organizational objectives and regulatory requirements.
• Ensure compliance with complex regulatory standards including HIPAA, GDPR, CCPA, ISO 27001, and HITRUST.
• Conduct thorough risk assessments and vulnerability evaluations.
• Prepare detailed compliance reports and documentation.
• Support external and internal audit processes.
• Track and implement regulatory changes.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science or related field (or equivalent experience).
• Master’s degree or advanced security certifications preferred, such as CISSP, CISM, or CRISC.
• 3-5 years of progressive experience in security compliance with healthcare, medical technology, or highly regulated industries.
• Proven track record of developing and implementing security strategies.
• Experience with regulatory compliance in complex environments.
• Excellent written and oral communication and interpersonal skills.
• High level of integrity and confidentiality.

Benefits

• Ability to work remotely.
• Opportunity to work in a strategic role within a growing organization.
• Engagement with a diverse team across various departments.
• Professional development opportunities in cybersecurity and compliance.